Privacy Policy
Last updated: November 2026
Introduction
Echo-reed respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect information when you use our website or engage our services.
Information We Collect
We may collect and process the following categories of personal data:
- Contact Information: Name, email address, postal address
- Enquiry Details: Information you provide about heritage conservation projects or service interests
- Technical Data: IP address, browser type, device information, and website usage patterns
- Cookie Data: Information collected through cookies and similar technologies (see our Cookies Policy)
How We Use Your Information
We use personal data for the following purposes:
- Responding to enquiries and providing requested information
- Delivering heritage conservation services
- Communicating about ongoing projects
- Improving website functionality and user experience
- Complying with legal obligations
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: When you submit enquiry forms or accept cookies
- Contractual Necessity: To deliver services you have commissioned
- Legitimate Interests: To improve our services and website functionality
- Legal Obligation: To comply with applicable laws and regulations
Data Sharing and Disclosure
We do not sell or rent personal data to third parties. We may share information with:
- Service providers who assist with website hosting, email communications, or business operations
- Professional advisors including solicitors and accountants
- Regulatory authorities when legally required
All third parties are required to maintain appropriate data protection standards.
Data Retention
We retain personal data only as long as necessary for the purposes outlined in this policy:
- Enquiry data: Retained for up to two years unless you engage our services
- Client project data: Retained for seven years after project completion for professional liability purposes
- Technical and cookie data: Retained as specified in our Cookies Policy
Your Rights
Under data protection law, you have the following rights:
- Access: Request copies of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your personal data
- Restriction: Request limitation of processing
- Portability: Receive your data in a structured format
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw previously given consent at any time
To exercise these rights, contact us at [email protected].
Data Security
We implement appropriate technical and organisational measures to protect personal data from unauthorised access, alteration, disclosure, or destruction. However, no internet transmission is completely secure, and we cannot guarantee absolute security.
International Transfers
We primarily process data within the United Kingdom. If data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
Children's Privacy
Our services are not directed at children under 16. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete the information promptly.
Changes to This Policy
We may update this privacy policy periodically to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised date.
Contact and Complaints
For questions about this privacy policy or to exercise your rights, contact us at [email protected].
You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters, at ico.org.uk.